arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2602.07893cs.SE
收藏

你的隐私被记录了吗?关于Android应用日志的实证研究

Is Your Private Information Logged? An Empirical Study on Android App Logs

Rochester Institute of Technology(罗切斯特理工学院);University of Waterloo(滑铁卢大学)

Zhiyuan Chen, Soham Sanjay Deo, Poorna Chander Reddy Puttaparthi, Vanessa Nava-Camal, Yiming Tang, Xueling Zhang, Weiyi Shang

AI总结:

本研究通过构建Android应用日志数据集,分析隐私泄露现状及原因,揭示开发者对隐私问题的关注,并提出隐私保护建议。

摘要:

随着移动应用的迅速增长,用户对隐私的担忧日益突出。Android应用日志作为重要的计算机资源,帮助开发者调试和监控Android应用的状态,同时也包含大量软件系统信息。以往的研究虽然承认软件日志和Android应用中的隐私泄露问题,但并未提供对Android应用日志隐私泄露的全面视角。在本研究中,我们构建了一个全面的Android应用日志数据集,并进行实证研究,分析Android应用日志中隐私泄露的状态和严重性。我们的研究包括三个方面:(1)了解现实世界开发者对软件日志相关隐私问题的关注;(2)研究Android应用日志中的隐私泄露;(3)调查隐私泄露Android应用日志的特点并分析其原因。我们的研究揭示了现实开发者对软件日志相关隐私问题的五种不同关注类别以及Android应用日志中隐私泄露的普遍性,其中大多数源于开发者对这类泄露的无意识。此外,我们的研究为开发者提供了保护隐私不被记录的建议。

英文摘要:

With the rapid growth of mobile apps, users' concerns about their privacy have become increasingly prominent. Android app logs serve as crucial computer resources, aiding developers in debugging and monitoring the status of Android apps, while also containing a wealth of software system information. Previous studies have acknowledged privacy leaks in software logs and Android apps as significant issues without providing a comprehensive view of the privacy leaks in Android app logs. In this study, we build a comprehensive dataset of Android app logs and conduct an empirical study to analyze the status and severity of privacy leaks in Android app logs. Our study comprises three aspects: (1) Understanding real-world developers' concerns regarding privacy issues related to software logs; (2) Studying privacy leaks in the Android app logs; (3) Investigating the characteristics of privacy-leaking Android app logs and analyzing the reasons behind them. Our study reveals five different categories of concerns from real-world developers regarding privacy issues related to software logs and the prevalence of privacy leaks in Android app logs, with the majority stemming from developers' unawareness of such leaks. Additionally, our study provides developers with suggestions to safeguard their privacy from being logged.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑